<div>
  If this field is not empty, request that the SAML IdP uses a specific
  authentication context, rather than its default. Check with the IdP
  administrators to find out which authentication contexts are available.
</div>
